ssh problem

[Dave Feustel]

I am trying to set up ssh for use on my local network.
When I try to access f9 with ssh from suse, the connection is refused.
When I try to access suse with ssh from f9, ssh hangs.
AFICT, all other ssh invocations on both f9 and suse succeed.
Is ssh being blocked by a problem with the f9 firewall? 
How can I check?

Thanks.

[Steve Searle]

Around 03:44pm on Monday, April 20, 2009 (UK time), Dave Feustel scrawled:

>  I am trying to set up ssh for use on my local network.
>  When I try to access f9 with ssh from suse, the connection is refused.
>  When I try to access suse with ssh from f9, ssh hangs.
>  AFICT, all other ssh invocations on both f9 and suse succeed.
>  Is ssh being blocked by a problem with the f9 firewall? 
>  How can I check? 
Easiest way would be to stop the firewall service temporarily and try
it.

# service iptables stop

Test it then restart the firewall.

# service iptables start

Steve

-- 
 
(o<     www.stevesearle.com
//\     Powered by Fedora
V_/_    No MS products were used in the creation of this message

 15:48:06 up 14 days,  3:10,  1 user,  load average: 0.00, 0.01, 0.06

[Dave Feustel]

On Mon, Apr 20, 2009 at 03:49:45PM +0100, Steve Searle wrote:
>  Around 03:44pm on Monday, April 20, 2009 (UK time), Dave Feustel
> scrawled:
>  
>  > I am trying to set up ssh for use on my local network.
>  > When I try to access f9 with ssh from suse, the connection is refused.
>  > When I try to access suse with ssh from f9, ssh hangs.
>  > AFICT, all other ssh invocations on both f9 and suse succeed.
>  > Is ssh being blocked by a problem with the f9 firewall? 
>  > How can I check?
>  
>  Easiest way would be to stop the firewall service temporarily and try
>  it.
>  
>  # service iptables stop
>  
>  Test it then restart the firewall.
>  
>  # service iptables start
>  
>  Steve
>  
Tried it, but stopping iptables made no difference.

 2/home/daf}su
Password: 
 2/home/daf}service iptables stop
iptables: Flushing firewall rules:                         [  OK  ]
iptables: Setting chains to policy ACCEPT: filter          [  OK  ]
iptables: Unloading modules:                               [  OK  ]
 2/home/daf}ssh -l dave $C4
^C 2/home/daf} #still hangs

[Tom Horsley]

On Mon, 20 Apr 2009 10:44:31 -0400
Dave Feustel wrote:

>  I am trying to set up ssh for use on my local network.
>  When I try to access f9 with ssh from suse, the connection is refused.
>  When I try to access suse with ssh from f9, ssh hangs. 
You might want to check the /etc/ssh/sshd_config files. I'm
pretty sure the default config on suse is different than the
default on fedora and they disagree on things like password
versus keyboard-interactive (which look the same to a user
of ssh, but are different in the protocol). One or the
other may also disallow root ssh access by default.

[Dave Feustel]

On Mon, Apr 20, 2009 at 11:01:36AM -0400, Tom Horsley wrote:
>  On Mon, 20 Apr 2009 10:44:31 -0400
>  Dave Feustel wrote:
>  
>  > I am trying to set up ssh for use on my local network.
>  > When I try to access f9 with ssh from suse, the connection is refused.
>  > When I try to access suse with ssh from f9, ssh hangs.
>  
>  You might want to check the /etc/ssh/sshd_config files. I'm
>  pretty sure the default config on suse is different than the
>  default on fedora and they disagree on things like password
>  versus keyboard-interactive (which look the same to a user
>  of ssh, but are different in the protocol). One or the
>  other may also disallow root ssh access by default. 
I checked the sshd_config files and several setting disagree.
Which (F9 or suse) should I adopt?

Thanks.

[Craig White]

On Mon, 2009-04-20 at 10:44 -0400, Dave Feustel wrote:
>  I am trying to set up ssh for use on my local network.
>  When I try to access f9 with ssh from suse, the connection is refused.
>  When I try to access suse with ssh from f9, ssh hangs.
>  AFICT, all other ssh invocations on both f9 and suse succeed.
>  Is ssh being blocked by a problem with the f9 firewall? 
>  How can I check? 
----
RedHat/Fedora systems will default to doing DNS reverse lookup on SSH
connection which on a LAN, will take a long time if you don't have the
systems registering with local DNS server or in /etc/hosts.

I suspect that SuSE is either firewall or configuration difference.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[Mikkel]

Dave Feustel wrote:
>  I am trying to set up ssh for use on my local network.
>  When I try to access f9 with ssh from suse, the connection is refused.
>  When I try to access suse with ssh from f9, ssh hangs.
>  AFICT, all other ssh invocations on both f9 and suse succeed.
>  Is ssh being blocked by a problem with the f9 firewall? 
>  How can I check?
>  
>  Thanks.
>   
Have you looked in /var/log/messages for any error messages? This is
usually my first step in troubleshooting daemon problems.

Mikkel
-- 

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!

[Andrew Parker]

On Mon, Apr 20, 2009 at 10:44 AM, Dave Feustel <dfeustel(a)mindspring.com&gt; wrote:
>  I am trying to set up ssh for use on my local network.
>  When I try to access f9 with ssh from suse, the connection is refused.
>  When I try to access suse with ssh from f9, ssh hangs.
>  AFICT, all other ssh invocations on both f9 and suse succeed.
>  Is ssh being blocked by a problem with the f9 firewall?
>  How can I check? 
try running ssh with '-vvv' and see where the output stops

[Dave Feustel]

On Tue, Apr 21, 2009 at 11:01:32AM -0400, Andrew Parker wrote:
>  On Mon, Apr 20, 2009 at 10:44 AM, Dave Feustel
> <dfeustel(a)mindspring.com&gt; wrote:
>  > I am trying to set up ssh for use on my local network.
>  > When I try to access f9 with ssh from suse, the connection is refused.
>  > When I try to access suse with ssh from f9, ssh hangs.
>  > AFICT, all other ssh invocations on both f9 and suse succeed.
>  > Is ssh being blocked by a problem with the f9 firewall?
>  > How can I check?
>  
>  try running ssh with '-vvv' and see where the output stops 
The problem was that the Suse and Fedora firewalls had to have ssh
incoming connections enabled. I now have that done for Suse, still
need to do that for F9. Ssh now works great outgoing on F9.

[Marc Wilson]

On Mon, Apr 20, 2009 at 10:44:31AM -0400, Dave Feustel wrote:
>  Is ssh being blocked by a problem with the f9 firewall? 
>  How can I check? 
As per the ssh documentation, pass -v to cause the client to be verbose,
let *it* tell *you* what it thinks is wrong.  Multiple 'v' increases the
verbosity.

Why no one suggested that, I have no idea.

-- 
 Marc Wilson |     There is no statute of limitations on stupidity.
 msw(a)cox.net |

[Dave Feustel]

On Mon, Apr 20, 2009 at 01:21:30PM -0700, Marc Wilson wrote:
>  On Mon, Apr 20, 2009 at 10:44:31AM -0400, Dave Feustel wrote:
>  > Is ssh being blocked by a problem with the f9 firewall? 
>  > How can I check?
>  
>  As per the ssh documentation, pass -v to cause the client to be verbose,
>  let *it* tell *you* what it thinks is wrong.  Multiple 'v' increases the
>  verbosity.
>  
>  Why no one suggested that, I have no idea.
>   
It was the firewall. I opened it for ssh and everything works now.